Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
iokit_devicetree
The IOKit registry matching the DeviceTree plane.
Column | Type | Description |
---|---|---|
busy_state | integer | 1 if the device is in a busy state else 0 |
class | text | Best matching device class (most-specific category) |
depth | integer | Device nested depth |
device_path | text | Device tree path |
id | bigint | IOKit internal registry ID |
name | text | Device node name |
parent | bigint | Parent device registry ID |
retain_count | integer | The device reference count |
service | integer | 1 if the device conforms to IOService else 0 |
List the components in a Mac's device tree
SELECT * from iokit_devicetree;